Privacy Policy

Last updated: 4 November 2026

Effective date: 8 October 2026

1. Who we are

Movio ("Movio", "we", "us", "our") is a social media management platform operated by ARCHIMEDES COMPANY LIMITED, Yangon, Myanmar. Marketing agencies use Movio to manage social media accounts, content and customer conversations on behalf of their own clients.

Product: Movio (moviosolution.com)
Privacy contact: [email protected]

2. Whose data we handle

Movio is a business-to-business product. Our responsibilities differ for each group of people whose data passes through it.

2.1 Agencies and their staff

Agencies subscribe to Movio. Their owners, managers and staff create accounts and use the platform. For this data, Movio decides how and why it is processed, so we are the "controller".

2.2 The agency's clients

An agency can give its own clients a "client workspace" login to review and approve posts. Their account data is handled like agency staff data.

2.3 People the agency reaches through Movio

Agencies connect their clients' social media accounts and store information about their clients' customers and audiences: contacts, comments, messages, WhatsApp conversations and opt-ins. For this data the agency decides why and how it is processed, so the agency is the "controller" and Movio is the "processor". The agency is responsible for having a lawful basis for it; Movio processes it only to provide the service.

2.4 Public data about other businesses

Agencies can track competitors: public Facebook Pages and public Instagram Business or Creator accounts that the agency does not manage. Section 6 explains what we collect and why.

3. What data we collect

3.1 From agencies, their staff and their clients

• Account details: name, email address, password (stored hashed), role and language preference.
• Agency details: agency name and the business contact details you provide.
• Usage and technical data: sign-in times, IP address, device and browser information, and actions taken in Movio, kept for security and to run the service.
• Plan and billing records. Movio does not take card payments in the app and does not store card numbers.

3.2 Through connected Facebook Pages and Instagram accounts

• Page and account details: name, ID, profile picture, follower counts.
• Posts, captions, images and videos the agency creates, schedules or publishes.
• Comments on the Page's or account's posts, including the commenter's public name and platform ID where Meta provides them, so the agency can read and reply to them.
• Direct messages people send to the Page or account on Messenger and Instagram, and the replies sent to them: the message text, the sender's name and platform ID, and pictures in the messages. These are collected only where the agency has switched messaging on for the connected account.
• Aggregate insights: views, reach, engagement and follower counts. These are totals, not data about individual people.

3.3 Through connected WhatsApp Business numbers

• Messages customers send to the client's WhatsApp number, and the replies sent from Movio.
• The customer's phone number and WhatsApp profile name.
• Opt-in and opt-out records, including keywords such as STOP, with their dates.
• Message templates and the delivery status of each message sent.

3.4 Through connected TikTok accounts

• Account details: the account's TikTok ID for Movio (open ID), display name and profile picture.
• Account statistics: follower, following, like and video counts. Movio stores them once a day to show how they change over time.
• The account's public videos: their ID, title, description, length, publishing time, share and embed links, and their view, like, comment and share counts. Private and friends-only videos are not read.
• Videos, captions and posting choices (audience, comment, Duet and Stitch settings, commercial content disclosure) for the videos the agency publishes through Movio, and their publishing status.

Movio does not read TikTok direct messages, comments or followers' identities.

3.5 Contacts and content uploaded by agencies

• Contact records: names, email addresses, phone numbers, tags and notes entered or imported by the agency.
• Media files uploaded for posts.

4. How we use data

• To provide, operate and maintain Movio and its features.
• To sign people in and keep accounts secure, including rate limiting and abuse prevention.
• To publish posts and send messages to connected accounts, at the agency's direction.
• To show comments, messages and analytics from connected accounts, and to produce reports.
• To provide AI features (section 7).
• To communicate with agencies about their account, service changes and support.
• To meet legal obligations and enforce our Terms.

We do not sell personal data, and we do not use it for advertising.

5. Data from connected platforms

5.1 Meta platforms (Facebook, Instagram, WhatsApp)

Movio connects to Facebook, Instagram and WhatsApp through Meta's official APIs, only with the permission of the person who connects each account. Data we receive from Meta is used only to provide the features described here, to the agency that connected the account. It is never sold, never used for advertising, never used to train AI models, and never shared except with the sub-processors listed in section 8 as needed to run the service.

Access can be removed at any time (see our Data Deletion page). When it is, Movio deletes the stored access tokens at once and can no longer reach the account. Data already collected through it is deleted on request, as described in section 10.

WhatsApp messages are sent through Meta's WhatsApp Business Platform. Meta charges each client directly for the messages sent from their number; Movio does not handle those payments.

5.2 TikTok

Movio connects to TikTok through TikTok for Developers (Login Kit, Content Posting API and Display API), only with the permission of the account holder, who sees and approves each permission on TikTok's own screen. Movio uses these permissions to:

• identify the connected account (user.info.basic);
• publish the videos the agency and its client have approved, with the posting choices made for each (video.publish);
• show the account's statistics and the performance of its public videos in Movio's analytics and reports (user.info.stats, video.list).

Data we receive from TikTok is used only for these purposes, for the agency that connected the account. It is never sold, never used for advertising, never used to train AI models, and never shared except with the sub-processors listed in section 8 as needed to run the service. Videos published through Movio are subject to TikTok's Music Usage Confirmation and, for branded content, its Branded Content Policy.

Access can be removed at any time: by disconnecting the account in Movio, which also withdraws Movio's access at TikTok, or in the TikTok app's settings (see our Data Deletion page). When it is removed, Movio deletes the stored access tokens at once. Data already collected through the account is deleted on request, as described in section 10.

6. Competitor tracking

Agencies can track public Facebook Pages and public Instagram Business or Creator accounts that belong to other businesses, to compare their public activity with their own clients'. For these accounts Movio collects only public business data: the account's name, picture, category and description; follower counts once a day; public posts with their reaction, comment and share counts; and, on Facebook, the text of public comments with their dates and like counts.

Movio does not store the names or profiles of the people who wrote those comments. The purpose is to analyse public engagement with businesses, not to monitor individuals. Competitor data is kept while the agency tracks the account and is deleted when the agency stops tracking it.

7. AI features

• AI review: the text of a draft post and, where available, its image are sent to an AI provider (currently Groq or OpenAI) to return market-specific guidance.
• Summaries: report figures for monthly report summaries, and the text of public comments (without commenter names) for competitor comment summaries, are sent to OpenAI to write the summary.
• Reply suggestions: when a member of the agency's staff asks for suggestions, the recent comments or messages in that conversation, and the text of the post they are about, are sent to the same AI provider as AI review to suggest replies. A person chooses, edits and sends the reply; Movio never sends a suggestion by itself.
• Moderation: before a post enters review, its text and images may be checked by OpenAI's moderation service for prohibited content.

Under our arrangements with these providers, the content is processed only to return the result and is not used to train their public models. An agency reviews and decides on all content before it is published.

8. Sub-processors

We share personal data only with providers that help us run Movio, each bound to process it only for that purpose:

• Meta Platforms (Facebook, Instagram, WhatsApp): to publish content, send messages, and retrieve comments, messages and analytics for connected accounts.
• TikTok: to publish videos and retrieve account and video statistics for connected TikTok accounts.
• OpenAI: AI summaries and content moderation.
• Groq: AI review of draft posts, and reply suggestions.
• Brevo: delivery of email campaigns an agency sends.
• DigitalOcean: hosting and database storage.
• Cloudflare: network delivery, security and traffic routing.

9. Where data is stored

Movio's application and database are hosted by DigitalOcean in Singapore. Data from agencies and their clients in Thailand, Myanmar, Laos and elsewhere is therefore transferred to and stored in Singapore. AI providers, Meta and TikTok may process data in other countries under their own safeguards.

10. How long we keep data

• While an account is active: we keep account, content and contact data while the agency's subscription is active, until the agency deletes it.
• Photos and videos: images are kept while the account is active. Videos are deleted from Movio 7 days after the post is published on every platform it was sent to; the published video stays on the platform it was published to, and Movio keeps only a record of the file (name, size and a fingerprint). Uploads never used in a post are deleted after 14 days, and files of cancelled posts 30 days after cancellation.
• Closing an account: data remains available for export for 30 days, and is then deleted within 90 days of closing.
• Deletion requests: we confirm a request within 7 days and delete the data within 30 days of confirming it.
• Removing access to a social account: access tokens are deleted immediately; data collected through the account is deleted on request.
• Comments and direct messages: kept while the account is active, until the agency deletes them or the social account's data is deleted on request. When Meta tells us that a person has deleted their comment or taken back a message, it is deleted from Movio too.
• Pictures in direct messages: a picture sent or received in a direct message is copied to Movio's storage so the conversation can show it, and the copy is deleted 30 days after the message. The text of the message is kept. Videos, voice messages and other attachments are not stored.
• Notifications from Meta: the raw notifications Meta sends us about new comments and messages are deleted 7 days after they have been processed, and after 30 days in any case.
• TikTok statistics: account statistics and public video counts are kept while the account is connected and the agency's subscription is active; they are deleted on request, or with the agency's account.
• Competitor data: kept while the competitor is tracked, deleted when tracking stops.
• Notifications: deleted after 90 days.

We may keep limited records longer where the law requires it, such as billing records.

11. Your rights

Depending on where you live and which law applies, including Thailand's Personal Data Protection Act, you may have the right to access, correct or delete your personal data, to object to or restrict processing, and to withdraw consent.

• For data an agency holds about you (as a contact, commenter or WhatsApp customer), the agency is the controller: please contact the agency. Movio will help the agency respond.
• For your own Movio account, or if you cannot reach the agency, email [email protected].
• To remove Movio's access to your Facebook, Instagram or TikTok account, or to have your data deleted, see our Data Deletion page.

12. Marketing messages

When an agency uses Movio to send email or WhatsApp broadcasts, the agency is responsible for having the recipients' consent. Movio provides opt-in and unsubscribe tools, honours opt-out keywords in Thai, Burmese, Lao and English, and requires agencies to use them. WhatsApp broadcasts can only be sent to people who opted in, using templates approved by Meta.

13. Security

We protect personal data with technical and organisational measures, including encryption of stored social media access tokens, hashed passwords, encrypted connections (HTTPS), signed requests to Meta's APIs, access controls that keep each agency's and client's data separate, and rate limiting against abuse. No system is perfectly secure, but we work to protect your data and meet the security standards required of us.

14. Children

Movio is a business tool and is not directed at children. We do not knowingly collect personal data from children.

15. Changes to this policy

We may update this policy. We will post the updated version here with a new date and, where required, notify agencies of material changes.

16. Contact

ARCHIMEDES COMPANY LIMITED, Yangon, Myanmar — [email protected]